$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa File: bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa (raw, json) Hash identifier: VtoAWF/4fy9didhfvRKauzh2fEL7T9CWBu5spU3Pf6Q= Subject key identifier: 98:1D:E9:F8:CE:88:5E:EB:C0:39:2F:77:57:C3:38:6E:46:53:B3:E2 Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Certificate serial: 010D0C9F4328584B3DB7016E84978391812057C0 Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 19318 IP address blocks: 68.168.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:01:6e:84:97:83:91:81:20:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3303eafb-22fd-4983-a25a-c7c0baf1f7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a6:a1:f3:e1:b5:63:74:30:01:f9:80:93:ee: 74:69:25:f6:e8:df:49:37:d4:07:b7:6d:b5:f3:bb: a5:cf:3e:8c:98:b6:72:37:b7:79:dc:24:67:e3:90: 75:64:86:9c:ed:99:e8:4a:76:1a:10:b8:fe:a8:4c: 7e:14:9c:b5:9f:89:ea:fb:5f:6a:16:97:8f:71:f8: 81:9f:68:ce:64:e7:9b:85:63:07:6f:03:a0:40:e8: 8b:d9:70:b0:7d:e4:8e:9c:09:70:c9:b5:35:e9:89: 74:b7:03:f8:06:ae:81:11:be:f8:7b:22:51:54:f3: 48:83:40:72:46:d4:51:da:58:34:89:01:74:a6:3f: 6c:f3:80:55:8d:24:3f:3f:80:3a:c6:f4:b6:aa:62: ad:48:be:33:1c:ff:e3:51:c3:a8:4d:12:67:4e:6a: 8b:ab:a2:0c:8c:5f:5c:73:d0:41:e9:8d:c7:27:a9: a8:93:8b:13:2c:69:c8:6c:da:1f:6e:a8:70:29:8c: 44:a6:d7:e4:b5:a9:ea:e2:b2:06:aa:f8:d7:8d:14: 5f:f8:9e:a5:17:7e:14:62:e7:ef:20:75:0a:56:52: ea:a0:d5:38:d2:60:1e:6d:57:37:39:e3:c5:d6:f8: 27:54:5b:32:00:29:e7:1d:63:08:40:44:ba:ae:60: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1D:E9:F8:CE:88:5E:EB:C0:39:2F:77:57:C3:38:6E:46:53:B3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/bbc7a20e-2b64-3d59-8c58-866db5cdc9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl X509v3 Authority Key Identifier: keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer sbgp-ipAddrBlock: critical IPv4: 68.168.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:74:2c:ab:b2:a9:e8:c6:c8:80:b2:3c:5c:49:9b:64:15:25: 4b:f0:10:dd:b8:1e:40:cf:c4:64:40:11:68:78:70:cb:ff:9b: e4:23:b1:d9:d6:f6:de:fe:7d:56:6c:b6:32:f9:79:b3:28:88: 76:8b:17:be:14:5f:38:ec:78:93:dc:59:2e:66:52:68:ca:a7: 2c:ac:51:4f:52:7c:63:be:ab:0d:2d:11:ce:48:84:c7:35:0a: a2:15:dc:20:3a:e7:69:a7:db:62:08:01:39:7c:6a:f5:6d:4f: 31:bc:a1:c8:6d:c4:fb:e5:51:07:84:ae:fd:c3:1e:a3:e1:dc: 42:7d:f4:8f:e8:62:09:b1:32:5d:66:c7:27:16:ec:97:2a:3b: 2a:fa:e3:23:55:92:5c:aa:4b:fa:ed:27:65:23:e6:da:01:4a: 96:d4:2a:fd:ad:d6:3f:f5:69:5f:d3:2a:e6:f9:c8:dd:dd:54: c7:a3:88:cc:e8:24:b4:bc:c8:f7:ea:04:b7:13:b0:a2:f8:2c: 99:29:13:7a:b4:31:40:7e:79:44:89:52:d9:e3:dd:4b:0a:db: 20:1a:84:2b:0e:a9:ed:a4:50:c7:79:fe:9a:26:d2:f6:51:c7: 56:45:0f:fd:12:db:f6:e6:89:13:82:97:5d:e9:d0:ae:b9:26: b1:76:21:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twFuhJeDkYEgV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2 NTlhMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzMwM2VhZmItMjJmZC00OTgzLWEyNWEtYzdjMGJhZjFmN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKah8+G1Y3QwAfmAk+50aSX26N9JN9QHt221 87ulzz6MmLZyN7d53CRn45B1ZIac7ZnoSnYaELj+qEx+FJy1n4nq+19qFpePcfiB n2jOZOebhWMHbwOgQOiL2XCwfeSOnAlwybU16Yl0twP4Bq6BEb74eyJRVPNIg0By RtRR2lg0iQF0pj9s84BVjSQ/P4A6xvS2qmKtSL4zHP/jUcOoTRJnTmqLq6IMjF9c c9BB6Y3HJ6mok4sTLGnIbNofbqhwKYxEptfktanq4rIGqvjXjRRf+J6lF34UYufv IHUKVlLqoNU40mAebVc3OePF1vgnVFsyACnnHWMIQES6rmBb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgd6fjOiF7rwDkvd1fDOG5GU7PiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3 Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvYmJjN2EyMGUtMmI2NC0z ZDU5LThjNTgtODY2ZGI1Y2RjOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKjVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC10LKuyqejGyICyPFxJm2QVJUvwEN24HkDPxGRAEWh4cMv/m+QjsdnW 9t7+fVZstjL5ebMoiHaLF74UXzjseJPcWS5mUmjKpyysUU9SfGO+qw0tEc5IhMc1 CqIV3CA652mn22IIATl8avVtTzG8ochtxPvlUQeErv3DHqPh3EJ99I/oYgmxMl1m xycW7JcqOyr64yNVklyqS/rtJ2Uj5toBSpbUKv2t1j/1aV/TKub5yN3dVMejiMzo JLS8yPfqBLcTsKL4LJkpE3q0MUB+eUSJUtnj3UsK2yAahCsOqe2kUMd5/pom0vZR x1ZFD/0S2/bmiROCl13p0K65JrF2IS0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:49:58 2025 by rpki-client